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AMENDMENT 

1. (Currently Amended) A method for authenticating a device connecting to a first 
network, comprising: 

eva l uating determining a history of one or more previously terminated 
connections of said device to at least one other network; 

evaluating an integrity of data content of said device based on said history; and 

providing a result of said evaluation. 

2. (Original) The method of claim 1, wherein said determining step further 
comprises the step of determining if said device connected to at least one untrusted 
network. 

3. (Original) The method of claim 1, wherein said determining step further 
comprises the step of determining if said device connected to at least one unknown 
network. 

4. (Original) The method of claim 1, wherein said determining step further 
comprises the step of determining if a token on said device has been altered. 

5. (Original) The method of claim 1, wherein said determining step further 
comprises the step of logging an address of each network that said device accessed. 

6. (Original) The method of claim 1, wherein a scope of said evaluating step is 
based on properties of said at least one other network. 

7. (Original) The method of claim 1, wherein a scope of said evaluating step is 
based on one or more defined content authentication rules. 

8. (Original) The method of claim 1, wherein said evaluating step further comprises 
the step of performing a virus scan. 

9. (Previously Presented) An apparatus for authenticating a device connecting to a 
first network, comprising: 

a memory; and 

at least one processor, coupled to the memory, operative to: 
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determine if said device previously connected evaluate a history of one or more 
previously terminated connections of said device to at least one other network; 

evaluate an integrity of data content of said device based on said history whether 
said device previously connected to at least one other network; and 

provide a result of said evaluation. 

10. (Original) The apparatus of claim 9, wherein said processor IS further 
configured to determine if a token on said device has been altered. 

11. (Original) The apparatus of claim 9, wherein said processor is further 
configured to evaluate a log of addresses of each network that said device accessed. 

12. (Original) The apparatus of claim 9, wherein a scope of said evaluating step is 
based on properties of said at least one other network. 

13. (Original) The apparatus of claim 9, wherein said processor is further 
configured to control a scope of said evaluation based on one or more defined content 
authentication rules. 

14-23 (Cancelled). 



